CVE-2009-2698
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
4.7 Medium
AI Score
Confidence
High
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.0005 Low
EPSS
Percentile
16.6%
The udp_sendmsg function in the UDP implementation in (1) net/ipv4/udp.c and (2) net/ipv6/udp.c in the Linux kernel before 2.6.19 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via vectors involving the MSG_MORE flag and a UDP socket.
References
git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1e0c14f49d6b393179f423abbac47f85618d3d46
lists.opensuse.org/opensuse-security-announce/2009-08/msg00008.html
rhn.redhat.com/errata/RHSA-2009-1222.html
rhn.redhat.com/errata/RHSA-2009-1223.html
secunia.com/advisories/23073
secunia.com/advisories/36430
secunia.com/advisories/36510
secunia.com/advisories/37105
secunia.com/advisories/37298
secunia.com/advisories/37471
support.avaya.com/css/P8/documents/100067254
www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.19
www.mandriva.com/security/advisories?name=MDVSA-2011:051
www.openwall.com/lists/oss-security/2009/08/25/1
www.redhat.com/support/errata/RHSA-2009-1233.html
www.securityfocus.com/archive/1/507985/100/0/threaded
www.securityfocus.com/archive/1/512019/100/0/threaded
www.securityfocus.com/bid/36108
www.securitytracker.com/id?1022761
www.ubuntu.com/usn/USN-852-1
www.vmware.com/security/advisories/VMSA-2009-0016.html
www.vupen.com/english/advisories/2009/3316
bugzilla.redhat.com/show_bug.cgi?id=518034
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11514
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8557
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9142
Social References
More
Related
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
4.7 Medium
AI Score
Confidence
High
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.0005 Low
EPSS
Percentile
16.6%